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This listing of claims replaces all prior versions, and 
listings of claims in the instant application: 
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Listing of Claims: 

1. (Currently Amended) A method for digital content 
access control, comprising: 

determining, on a n end- user device, digital content 
to be made accessible via a rights locker; 

determining, on said end- user device, enrollment 
authentication data; 

sending, from said end- user device to a rights 
locker provider over a network, a rights locker 
enrollment request to said rights locker provider, said 
rights locker enrollment request comprising a digital 
content request and said enrollment authentication data; 

receiving, on said end- user device from said rights 
locker provider over said network, one or more 
authenticated rights locker access requests in response 
to said sending, said one or more authenticated rights 
locker access requests for subsequent use in accessing 
digital content associated with said rights locker; 

receiving, on said end- user device from a user of 
said end- user device, an indication of a selection of one 
of said one or more authenticated rights locker access 
requests ; 

sending, from said end- user device to said rights 
locker provider over said network, said selected 
authenticated rights locker access request to said rights 
locker provider; and 

receiving, on said end- user device from said rights 
locker provider in response to said sending said selected 
authenticated rights locker access request, a result 
including at least an authenticated digital content 
request . 
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2. (Original) The method of claim 1 wherein said 
digital content request comprises a request for initializing 
said rights locker with rights to specified digital content. 

3. (Currently Amended) The method of claim 1 wherein 
said enrollment authentication data comprises: 

rights locker access authentication data for 
determining what rights, if any, said user of said end- 
user device has to access said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to digital 
content associated with said rights locker. 

4. (Original) The method of claim 3 wherein said rights 
locker access authentication data comprises payment for use of 
a rights locker service. . 

5. (Original) The method of claim 3 wherein said rights 
content access authentication data comprises payment for 
rights deposited in said rights locker. 

6. (Original) The method of claim 1 wherein said 
enrollment authentication data comprises a reenrollment key 
determined in a previous enrollment request for said rights 
locker, said reenrollment key for supplementing or replacing' 
enrollment authentication data of said previous enrollment 
request . 
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7. (Currently Amended) The method of claim 1, further 
comprising storing at least part of said one or more 
authenticated rights locker access requests in a bookmark on 
said end-user device. 
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8. (Original) The method of claim 1 wherein said one or 
more authenticated rights locker access requests are embedded 
in a Web cookie. 

9. (Original) The method of claim 1 wherein said one or 
more authenticated rights locker access requests are 
encapsulated in an HTTP Response message. 

10. (Currently Amended) A method for digital content 
access control, comprising: 

receiving, by a rights locker provider, a rights 
locker enrollment request from a n end- user device 
associated with a user, said rights locker enrollment 
request comprising a digital content request and 
enrollment authentication data; 

determining, by said rights locker provider, whether 
said user is authorized, said determining comprising 
determining the rights of said user to access said rights 
locker and the rights of said user to digital content 
specified by said digital content request, 

wherein upon said determining finding said user 

is authorized, 

initializing, by said rights locker provider, 

said rights locker with rights to said digital 

content; 

obtaining, by said rights locker provider, one 
or more tokens that authenticate future access to a 
rights locker corresponding to said digital content; 

creating, by said rights locker provider, one 
or more authenticated rights locker access requests 
based at least in part on said one or more tokens; 

sending, by said rights locker provider to said 
end- user device over a network, said one or more 
authenticated rights locker access requests; 
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receiving, by said rights locker provider from 
said end- user device over said network, an 
indication of a user selection of one of said one or 
more authenticated rights locker access requests; 
and 

accessing, by said rights locker provider, the 
contents of said rights locker according to a type 
of said rights token associated with said user 
selected one of said one or more authenticated 
rights locker access requests. 

11. (Original) The method of claim 10 wherein said 
digital content request comprises a request for initializing 
said rights locker with rights to specified digital content. 

12. (Original) The method of claim 10 wherein said 
enrollment authentication data comprises: 

rights locker access authentication data for 
determining what rights, if any, said user has to access 
said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to digital 
content associated with said rights locker. 

13. (Original) The method of claim 12 wherein said 
rights locker access authentication data comprises payment for 
use of a rights locker service. 

14. (Original) The method of claim 12 wherein said 
rights content access authentication data comprises payment 
for rights deposited in said rights locker. 
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15. (Original) The method of claim 10 wherein said 
enrollment authentication data comprises a reenrollment key 
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determined in a previous enrollment request for said rights 
locker, said reenrollment key for supplementing or replacing 
enrollment authentication data of said previous enrollment 
request . 

16. (Original) The method of claim 10 wherein said 
determining comprises determining whether said user is 
entitled to become an enrolled user based at least in part on 
whether payment for use of the rights locker service succeeds. 

17. (Original) The method of claim 10 wherein said 
determining comprises determining whether an enrolled user is 
entitled to populate said rights locker with rights to said 
digital content based at least in part on whether payment for 
said rights succeeds. 

18. (Currently Amended) The method of claim 10 wherein 
at least part of said one or more authenticated rights locker 
access requests are for storage in a. bookmark on said end- user 
device . 



19. (Original) The method of claim 10, further 
comprising embedding said one or more authenticated rights 
locker access requests in a Web cookie before said sending. 

20. (Original) The method of claim 10, further 
comprising encapsulating said one or more authenticated rights 
locker access requests in an HTTP Response message before said 
sending . 
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21. (Currently Amended) A program storage device 
readable by a machine, embodying a program of instructions 
executable by the machine to perform a method for digital 
content access control, the method comprising: 
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determining, on a n end- user device, digital content 
to be made accessible via a rights locker; 

determining, on said end- user device, enrollment 
authentication data; 

sending, from said end- user device to a rights 
locker provider over a network, a rights locker 
enrollment request to said rights locker provider, said 
rights locker enrollment request comprising a digital 
content request and said enrollment authentication data; 

receiving, on said end- user device from said rights 
locker provider over said network, one or more 
authenticated rights locker access requests in response 
to said sending, said one or more authenticated rights 
locker access requests for subsequent use in accessing 
digital content associated with said rights locker; 

receiving, on said end- user device from a user of 
said end- user device, an indication of a selection of one 
of said one or more authenticated rights locker access 
requests; 

sending, from said end- user device to said rights 
locker provider over said network, said selected 
authenticated rights locker access request to said rights 
locker provider; and 

receiving, on said end- user device from said rights 
locker provider in response to said sending said selected 
authenticated rights locker access request, a result 
including at least an authenticated digital content 
request . 
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22. (Original) The program storage device of claim 21 
wherein said digital content request comprises a request for 
initializing said rights locker with rights to specified 
digital content . 
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23. (Currently Amended) The program storage device of 
claim 21 wherein said enrollment authentication data 
comprises : 

rights locker access authentication data for 
determining what rights, if any, said user of said end- 
user device has to access said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to digital 
content associated with said rights locker. 

24. (Original) The program storage device of claim 23 
wherein said rights locker access authentication data 
comprises payment for use of a rights locker service. 

25. (Original) The program storage . device of claim 23 • 
wherein said rights content access authentication data 
comprises payment for rights, deposited in said rights locker, 

26. (Original) The program storage device of claim 21 
wherein said enrollment authentication data comprises a 
reenrollment key determined in a previous enrollment request 
for said rights locker, said reenrollment key for 
supplementing or replacing enrollment authentication data of 
said previous enrollment request. 

27. (Currently Amended) The program storage device of 
claim 21, said method further comprising storing at least part 
of said one or more authenticated rights locker access 
requests in a bookmark on said end- user device. 
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28. (Original) The program storage device of claim 21 
wherein said one or more authenticated rights locker access 
requests are embedded in a Web cookie. 
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29. (Original) The program storage device of claim 21 
wherein said one or more authenticated rights locker access 
requests are encapsulated in an HTTP Response message. 



30. (Currently Amended) A program storage device 
readable by a machine, embodying a program of instructions 
executable by the machine to perform a method for digital 
content access control, the method comprising: 

receiving, by a rights locker provider, a rights 
locker enrollment request from a n end- user device 
associated with a user, said rights locker enrollment 
request comprising a digital content request and 
enrollment authentication data; 

determining, by said rights locker provider,, whether 
. said user is authorized, said determining comprising r :. 

determining the rights of said user . to access said rights 
! locker and the rights of said user to digital content .. 
specified by said digital content request, 

wherein upon said determining finding said user is 
authorized, 

initializing, by said rights locker provider, 
said rights locker with rights to said digital 
content ; 

obtaining, by said rights locker provider, one 
or more tokens that authenticate future access to a 
rights locker corresponding to said digital content ; 

creating, by said rights locker provider, one 
or more authenticated rights locker access requests 
based at least in part on said one or more tokens; 

sending, by said rights locker provider to said 
end- user device over a network, said one or more 
authenticated rights locker access requests; 
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receiving, by said rights locker provider from 
said end- user device over said network, an 
indication of a user selection of one of said one or 
more authenticated rights locker access requests; 
and 

accessing, by said rights locker provider, the 
contents of said rights locker according to a type 
of said rights token associated with said user 
selected one of said one or more authenticated 
rights locker access requests. 

31. (Original) The program storage device of claim 3 0 
wherein said digital content request comprises a request for 
initializing said rights locker with rights to specified 
digital content. 

.32. (Original) The program storage device of claim 30 
wherein said enrollment authentication data comprises: 
rights locker access authentication data for 
determining what rights, if any, said user has to access 
said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to digital 
content associated with said rights locker. 

33. (Original) The program storage device of claim 32 
wherein said rights locker access authentication data 
comprises payment for use of a rights locker service. 

34. (Original) The program storage device of claim 32 
wherein said rights content access authentication data 
comprises payment for rights deposited in said rights locker. 
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35. (Original) The program storage device of claim 30 
wherein said enrollment authentication data comprises a 
reenrollment key determined in a previous enrollment request 
for said rights locker, said reenrollment key for 
supplementing or replacing enrollment authentication data of 
said previous enrollment request. 

36. (Original) The program storage device of claim 30 
wherein said determining comprises determining whether said 
user is entitled to become an enrolled user based at least in 
part on whether payment for use of the rights locker service 
succeeds . 



37. (Original) The program storage device of claim 30 
wherein said determining comprises determining whether an 
enrolled user is entitled to populate said rights locker with 
right's to said digital content based at least in part on 
whether payment for said rights succeeds. 

38. (Currently Amended) The program storage device of 
claim 3 0 wherein at least part of said one or more 
authenticated rights locker access requests are for storage in 
a bookmark on said end-user device. 



39. (Original) The program storage device of claim 30, 
said method further comprising embedding said one or more 
authenticated rights locker access requests in a Web cookie 
before said sending. 
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40. (Original) The program storage device of claim 30, 
said method further comprising encapsulating said one or more 
authenticated rights locker access requests in an HTTP 
Response message before said sending. 
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41. (Currently Amended) An apparatus for digital 
content access control, comprising: 

means for determining, on a n end- user device, 
digital content to be made accessible via a rights 
locker; 

means for determining, on said end- user device, 
enrollment authentication data; 

means for sending, from said end- user device to a 
rights locker provider over a network, a rights locker 
enrollment request to said rights locker provider, said 
rights locker enrollment request comprising a digital 
content request and said enrollment authentication data; 

means for receiving, on said end- user device from 
said rights locker provider over said network, one or 
more authenticated rights locker access requests in 
response to said sending, said one or more authenticated 
rights locker access requests for subsequent use in 
accessing digital content associated with said rights 
locker; 

means for receiving, on said end- user device from a 
user of said end- user device, an indication of a 
selection of one of said one or more authenticated rights 
locker access requests; 

means for sending, from said end- user device to said 
rights locker provider over said network, said selected 
authenticated rights locker access request to said rights 
locker provider; and 

means for receiving, on said end- user device from 
said rights locker provider in response to said sending 
said selected authenticated rights locker access request, 
a result including at least an authenticated digital 
content request. 



GUNNISON, McKAY & 

HODGSON, LLP. 
Garden West Office Plaza 
1 900 Garden Road, Suit c2 20 
Monterey. CA 93940 

(831)655-0850 
Fax (831)655-0888 



Page 12 of 33 



Appl. No. 10/687,488 

Amdt. dated April 24, 2 008 

Reply to Office Action of January 24, 2008 



42. (Original) The apparatus of claim 41 wherein said 
digital content request comprises a request for initializing 
said rights locker with rights to specified digital content. 

43. (Currently Amended) The apparatus of claim 41 
wherein said enrollment authentication data comprises: 

rights locker access authentication data for 
determining what rights, if any, said user of said end- 
user device has to access said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to digital 
content associated with said rights locker. 

44. (Original) The apparatus of claim 43 wherein said 
rights locker access authentication data comprises payment for 
use. of a rights locker service. 

*.. 4.5 . (Original) The apparatus of claim 43 wherein said, 
rights content access authentication data comprises payment 
for rights deposited in said rights locker. 

46. (Original) The apparatus of claim 41 wherein said 
enrollment authentication data comprises a reenrollment key 
determined in a previous enrollment request for said rights 
locker, said reenrollment key for supplementing or replacing 
enrollment authentication data of said previous enrollment 
request . 

47. (Currently Amended) The apparatus of claim 41, 
further comprising means for storing at least part of said one 
or more authenticated rights locker access requests in a 
bookmark on said end-user device. 
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48. (Original) The apparatus of claim 41 wherein said 
one or more authenticated rights locker access requests are 
embedded in a Web cookie . 

49. (Original) The apparatus of claim 41 wherein said 
one or more authenticated rights locker access requests are 
encapsulated in an HTTP Response message. 

50. (Currently Amended) An apparatus for digital 
content access control, comprising: 

means for receiving, by a rights locker provider, a 
rights locker enrollment request from a end- user device 
associated with a user, said rights locker enrollment 
request comprising a digital content request and 
enrollment authentication data; 

means for determining, by said rights locker 
provider, whether said user is authorized, said 
determining comprising determining the rights of said 
user to access said rights locker and the rights of said 
user to digital content specified by said digital content 
request ; 

means for, upon said determining finding said user 
is authorized, 

initializing, by said rights locker provider, 
said rights locker with rights to said digital 
content ; 

obtaining, by said rights locker provider, one 
or more tokens that authenticate future access to a 
rights locker corresponding to said digital content; 

creating, by said rights locker provider, one 
or more authenticated rights locker access requests 
based at least in part on said one or more tokens; 
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sending, by said rights locker provider to said 
end- user device over a network, said one or more 
authenticated rights locker access requests; 

receiving, by said rights locker provider from 
said end- user device over said network, an 
indication of a user selection of one of said one or 
more authenticated rights locker access requests; 
and 

accessing, by said rights locker provider, the 
contents of said rights locker according to a type 
of said rights token associated with said user 
selected one of said one or more authenticated 
rights locker access requests. 

51. (Original) The apparatus of claim 50 wherein said 
digital content request comprises a request for initializing 
said rights locker with rights to specified digital content. 

52. (Original) The apparatus of claim 50 wherein . said- 
enrollment authentication data comprises: 

rights locker access authentication data for 
determining what rights, if any, said user has to access 
said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to digital 
content associated with said rights locker. 

53. (Original) The apparatus of claim 52 wherein said 
rights locker access authentication data comprises payment for 
use of a rights locker service. 
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54. (Original) The apparatus of claim 52 wherein said 
rights content access authentication data comprises payment 
for rights deposited in said rights locker. 
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55. (Original) The apparatus of claim 50 wherein said 
enrollment authentication data comprises a reenrollment key 
determined in a previous enrollment request for said rights 
locker, said reenrollment key for supplementing or replacing 
enrollment authentication data of said previous enrollment 
request . 

.56. (Original) The apparatus of claim 50 wherein said 
determining comprises determining whether said user is 
entitled to become an enrolled user based at least in part on 
whether payment for use of the. rights locker service succeeds. 

57. (Original) The apparatus of claim 50 wherein said 
determining comprises means for determining whether an 
enrolled user is entitled to populate said rights locker with 
rights ,to said ' digital content based at least in part on . ■ 
whether payment for said rights succeeds. 

58. (Currently Amended) The apparatus of claim 50 
wherein at least part of said one or more authenticated rights 
locker access requests are for storage in a bookmark on said 
end-user device. 



59. (Original) The apparatus of claim 50, further 
comprising means for embedding said one or more authenticated 
rights locker access requests in a Web cookie before said 
sending . 
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60. (Original) The apparatus of claim 50, further 
comprising means for encapsulating said one or more 
authenticated rights locker access requests in an HTTP 
Response message before said sending. 
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61. (Previously Presented) An apparatus for digital 
content access control, comprising: 

a memory for storing said digital content; and 
a processor configured to: 

determine, on said apparatus, digital content to be 
made accessible via a rights locker; 

determine, on said apparatus, enrollment 
authentication data; 

send, from said apparatus to a rights locker 
provider over a network, a rights locker enrollment 
request to a rights locker provider, said rights locker 
enrollment request comprising a digital content request 
and said enrollment authentication data; 

receive, on said apparatus from said rights locker 
provider over said network, one or more authenticated 
rights locker access requests in response to said 
sending, said one or more- authenticated rights locker 
access requests for subsequent use in accessing digital 
content associated with said rights locker; 

receive, on said apparatus from a user of said 
apparatus, an indication of a selection of one of said 
one or more authenticated rights locker access requests; 

send, from said apparatus to said rights locker 
provider over said network, said selected authenticated 
rights locker access request to said rights locker 
provider; and 

receive, on said apparatus from said rights locker 
provider in response to said sending said selected 
authenticated rights locker access request, a result 
including at least an authenticated digital content 
request . 
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62. (Original) The apparatus of claim 61 wherein said 
digital content request comprises a request for initializing 
said rights locker with rights to specified digital content. 

63. (Previously Presented) The apparatus of claim 61 
wherein said enrollment authentication data comprises: 

rights locker access authentication data for 
determining what rights, if any, said user has to access 
said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to digital 
content associated with said rights locker. 

64. (Original) The apparatus of claim 63 wherein said 
rights locker access authentication data comprises payment for 
use of a rights locker . service ; ; 

65. (Original) The 'apparatus, of claim 63 wherein said 
rights content access authentication data comprises payment; 
for rights deposited in said rights locker. 

66. (Original) The apparatus of claim 61 wherein said 
enrollment authentication data comprises a reenrollment key 
determined in a previous enrollment request for said rights 
locker, said reenrollment key for supplementing or replacing 
enrollment authentication data of said previous enrollment 
request . 

67. (Original) The apparatus of claim 61 wherein said 
apparatus comprises a smart card. 
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68. (Original) The apparatus of claim 67 wherein said 
smart card comprises a Java Card™ technology- enabled smart 
card. 
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69. (Original) The apparatus of claim 67 wherein said 
smart card comprises a CDMA (Code Division Multiple Access) 
technology-enabled smart card. 

70. (Original) The apparatus of claim 67 wherein said 
smart card comprises a SIM (Subscriber Identity Module) card. 

71. (Original) The apparatus of claim 67 wherein said 
smart card comprises a WIM (Wireless Interface Module) . 

72. (Original) The apparatus of claim 67 wherein said 
smart card comprises a USIM (Universal Subscriber Identity 
Module) . 

73. (Original) The apparatus of claim 67 wherein said 
smart card comprises a UIM (User Identity Module). 

74. (Original) The. apparatus of claim 67 wherein said 
smart card comprises a R-UIM (Removable User Identity Module) . 

75. (Previously Presented) The apparatus of claim 61 
wherein said processor is further configured to store at least 
part of said one or more authenticated rights locker access 
requests in a bookmark on said apparatus. 

76. (Original) The apparatus of claim 61 wherein said 
one or more authenticated rights locker access requests are 
embedded in a Web cookie . 
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77. (Original) The apparatus of claim 61 wherein said 
one or more authenticated rights locker access requests are 
encapsulated in an HTTP Response message. 
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78. (Currently Amended) An apparatus for digital 
content access control, comprising: 

a memory for storing one or more rights lockers that 
describe digital content access rights; and 
a processor configured to: 

receive, by said apparatus, a rights locker 
enrollment request from a n end- user device 
associated with a user, said rights locker 
enrollment request comprising a digital content 
request and enrollment authentication data; 

determine, by said apparatus, whether said user 
is authorized, said determining comprising 
determining the rights of said user to access said 
rights locker and the rights of said user to digital 
content specified by said digital content request, 
wherein upon, said determining finding 
said user is' authorized, 

initialize, by said apparatus, said 
-rights locker with rights to said digital 
content ; 

obtain, by said apparatus, one or 
more tokens that authenticate future 
access to a rights locker corresponding to 
said digital content; 

create, by said apparatus, one or 
more authenticated rights locker access 
requests based at least in part on said 
one or more tokens ; 

send, by said apparatus to said end- 
user device over a network, , said one or 
more authenticated rights locker access 
requests ; 

receive, by said apparatus from said 
end-user device over said network, an 
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indication of a user selection of one of 
said one or more authenticated rights 
locker access requests; and 

access, by said apparatus, the 
contents of said rights locker according 
to a type of said rights token associated 
with said user selected one of said one or 
more authenticated rights locker access 
requests . 



79. (Original) The apparatus of claim 78 wherein said 
digital content request comprises a request for initializing 
said rights locker with rights to specified digital content. 

80. (Original) The apparatus of claim 78 wherein said 
enrollment authentication data, comprises: 

rights locker access., authentication data for 
determining what rights, if. any, said user has to access 
said rights locker; and .. 

rights content access authentication data for 
determining what rights, if any, said user has to digital 
content associated with said rights locker. 

81. (Original) The apparatus of claim 80 wherein said 
rights locker access authentication data comprises payment for 
use of a rights locker service. 

82. (Original) The apparatus of claim 80 wherein said 
rights content access authentication data comprises payment 
for rights deposited in said rights locker. 
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83. (Original) The apparatus of claim 78 wherein said 
enrollment authentication data comprises a reenrollment key 
determined in a previous enrollment request for said rights 
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locker, said reenrollment key for supplementing or replacing 
enrollment authentication data of said previous enrollment 
request . 

84. (Original) The apparatus of claim 78 wherein said 
processor is further configured to determine whether said user 
is entitled to become an enrolled user based at least in part 
on whether payment for use of the rights locker service 
succeeds . 

85. (Original) The apparatus of claim 78 wherein said 
processor is further configured to determine whether an 
enrolled user is entitled to populate said rights locker with 
rights to said digital content based at least in part on 
whether payment for said rights succeeds. 



86. (Currently Amended.) . -.. The /apparatus of claim 78 
wherein at least part of said one or more authenticated rights 
locker access requests are for storage in a bookmark on said 
end- user device. 

87. (Original) The apparatus of claim 78 wherein said 
processor is further configured to embed said one or more 
authenticated rights locker access requests in a Web cookie 
before said sending. 

88. (Original) The apparatus of claim 78 wherein said 
processor is further configured to encapsulate said one or 
more authenticated rights locker access requests in an HTTP 
Response message before said sending. 
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